diff --git a/Chart.yaml b/Chart.yaml
index c2521d9..1a97f4a 100644
--- a/Chart.yaml
+++ b/Chart.yaml
@@ -23,17 +23,30 @@ description: |
       Git).
 
 type: application
-version: 0.7.1
-appVersion: "0.7.1"
+version: 0.7.2
+appVersion: "0.7.2"
 
+# All 4 subcharts now resolve from registry.odoosky.cloud (mirrored
+# 2026-05-08). Mirror-first discipline + China-region readiness: a
+# Jetstack / Traefik / Longhorn / external-secrets-io outage no longer
+# blocks new tenant cluster bootstrap.
+#
+# Original upstream sources (for re-sync if a chart bumps):
+#   cert-manager     → https://charts.jetstack.io
+#   traefik          → https://traefik.github.io/charts
+#   longhorn         → https://charts.longhorn.io
+#   external-secrets → https://charts.external-secrets.io
+#
+# Re-sync recipe: `helm pull <chart> --repo <upstream> --version <v>`
+# then `helm push <tgz> oci://registry.odoosky.cloud/odoosky/docker-mirror/charts`.
 dependencies:
   - name: cert-manager
     version: "v1.16.1"
-    repository: "https://charts.jetstack.io"
+    repository: "oci://registry.odoosky.cloud/odoosky/docker-mirror/charts"
     condition: certManager.enabled
   - name: traefik
     version: "33.2.1"
-    repository: "https://traefik.github.io/charts"
+    repository: "oci://registry.odoosky.cloud/odoosky/docker-mirror/charts"
     condition: traefik.enabled
   # Longhorn — CSI block storage with snapshot + clone primitives.
   # See ADR 0003 (in odooskyv3 monorepo). Phase 1 declares the
@@ -42,14 +55,12 @@ dependencies:
   # Argo Application sets the flag.
   - name: longhorn
     version: "1.7.2"
-    repository: "https://charts.longhorn.io"
+    repository: "oci://registry.odoosky.cloud/odoosky/docker-mirror/charts"
     condition: longhorn.enabled
   # External Secrets Operator — declarative Secret delivery from
   # OpenBao. Replaces Tower's imperative kubectl-stamp pattern for
-  # gitea-archive-pull (Phase 1 pilot, 2026-05-07). The other 4
-  # Tower-stamped Secrets remain on the legacy path until a planned
-  # follow-up sprint (Item #9 in v3 open queue).
+  # the 5 substrate Secrets (Item #9, all phases shipped 2026-05-07).
   - name: external-secrets
     version: "0.10.7"
-    repository: "https://charts.external-secrets.io"
+    repository: "oci://registry.odoosky.cloud/odoosky/docker-mirror/charts"
     condition: externalSecrets.enabled